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AMENDMENTS TO THE CLAIMS 



1 . (Currently Amended) A system for remote configuration of a transaction 
processing device, comprising: 

a transaction processing device for providing a network service^-and , wherein said 
transaction processing device comprises: 

a first cryptographic services module for providing secure communication of 
information from said transaction processing device to said configuration server via said 
public communications network, and 

a first communications protocol stack to facilitate communication over said 
communications network; 

a remote configuration server, wherein said configuration server is capable of 
communicating securely with said transaction processing device via a public communications 
network, wherein said transaction processing device is capable of communicating securely 
with said configuration server via said public network, and wherein said transaction 
processing device is capable of being remotely configured by said configuration server via 
said public communications network , wherein said remote configuration server comprises: 

a second cryptographic services module for providing secure communication 
of information from said configuration server to said transaction processing device via said 
public network, 

a second communications protocol stack to facilitate communication with said 
transaction processing device over said communications network, and 

a security services module, wherein said security services module extracts a 
public key of said transaction processing device from said certificate of said transaction 
processing device to authenticate said transaction processing device; and 

a certificate manager communicatively connected to said transaction processing 
device, wherein said certificate manager issues a terminal certificate to said transaction 
processing device . 

2 - 4. (Canceled) 

5. (Original) The system of claim 1, wherein said transaction processing device 
communicates securely over said public network without utilizing a host processor based 
system that is external to said device. 
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6. (Currently Amended) The system of claim [[4]] 1, wherein said 
communications protocol stack is a TCP/IP stack. 

7. (Currently Amended) The system of claim [[4]] 1, wherein said configuration 
server comprises: 

a configuration module, wherein said second cryptographic services module is part of 
said configuration module. 

8 - 9. (Canceled) 

10. (Currently Amended) The system of claim 9 1, wherein said certificate 
manager issues a server certificate to said configuration server. 

1 1 . (Currently Amended) The system of claim 9 1, wherein said terminal 
certificate is stored in said first cryptographic services module. 

12. (Original) The system of claim 10, wherein said server certificate is stored in 
said second cryptographic services module. 

13. (Original) The system of claim 1 1, wherein said terminal certificate is stored 
in said second cryptographic services module. 

14. (Original) The system of claim 12, wherein said server certificate is stored in 
said first cryptographic services module. 

15. (Original) The system of claim 11, wherein said first cryptographic services 
module further comprises at least one cryptographic algorithm for encrypting information 
transmitted from said transaction processing device to said configuration server. 

16. (Original) The system of claim 12, wherein said second cryptographic services 
module further comprises at least one cryptographic algorithm for encrypting information 
transmitted from said configuration server to said transaction processing device. 

17. (Currently Amended) The system of claim 9 1, wherein said certificate 
manager is part of said configuration server. 

18. (Canceled) 
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1 9. (Currently Amended) The system of claim +8 i, wherein said second 
cryptography services module signs a hash of configuration data about said transaction 
processing device retrieved from a database services module of said configuration server with 
a private key of the configuration server. 

20. (Original) The system of claim 19, wherein said signed configuration data is 
encrypted with said extracted public key of said transaction processing device and transmitted 
to said transaction processing device over said public communications network. 

21. (Currently Amended) The system of claim 19, wherein said signed 
configuration data is transmitted to said transaction processing device over said public 
comminations communications network. 

22. (Original) The system of claim 20, further comprising: 

a web server for presenting a web based user interface to a user of said transaction 
processing device, wherein said user can update configuration data stored on said 
configuration server via said web based user interface. 

23. (Original) The system of claim 22, wherein said web server comprises a user 
authentication module for verifying said user of said transaction processing device. 

Claims 24 through 34 (Canceled). 
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35. (Original) A method for remotely configuring a transaction processing device, 
comprising the steps of: 

authenticating said transaction processing device by a configuration server; 

authenticating said configuration server to said transaction processing device, if said 
configuration server includes configuration data about said transaction processing device; 

providing said configuration data to said transaction processing device by said 
configuration server; 

storing said provided configuration data by said transaction processing device; 

receiving by said configuration server an acknowledgment from said transaction 
processing device; and 

storing said received information including said configuration data by said 
configuration server. 

36. (Original) The method of claim 35, wherein said authenticating said 
transaction processing device step comprises the steps of: 

initiating a connection with a communication network by said transaction processing 

device; 

encrypting an identifying token by said transaction processing device utilizing a 
private key of said transaction processing device; 

transmitting said encrypted identifying token via said communication network to said 
configuration server; and 

decrypting said received identifying token by said configuration server utilizing a 
public key of said transaction processing device. 

37. (Original) The method of claim 36, wherein said authenticating said 
configuration server step comprises the steps of: 

encrypting an identifying number of said configuration server by said configuration 
server utilizing a private key of said configuration server; 

transmitting said encrypted identifying number via said communication network to 
said transaction processing device; and 

decrypting said received identifying number by said transaction processing device 
utilizing a public key of said configuration server. 



25423306.1 



5 



Application No.: 09/588,367 Docket No.: 56728/P001US/10001505 

38. (Original) The method of claim 37, wherein said step of providing 
configuration data comprises the steps of: 

encrypting at least a portion of said configuration data by said configuration server; 

and 

transmitting said encrypted configuration data to said transaction processing device. 

39. (Original) The method of claim 38, wherein said step of storing said provided 
configuration data further comprises the steps of: 

verifying by said transaction processing device that it is the intended recipient of said 
received encrypted configuration information; and 

verifying by said transaction processing device that the received encrypted 
information was sent by said configuration server. 

40. (Original) The method of claim 35, wherein said transaction processing device 
is a point-of-sale terminal. 
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52. (Previously Presented) The system of claim 1 further comprising: 
configuration data transmitted from said remote configuration server to said 

transaction processing device wherein said configuration data is stored on said remote 
configuration server and comprises transaction processing device settings used for the initial 
setup of said transaction processing device. 

53. (Canceled) 

54. (Previously Presented) The system of claim 1 wherein said remote 
configuration server comprises: 

a configuration module comprising: 

a database services module wherein said database services module is capable 
of storing configuration data; and 

a software module wherein said software module determines if configuration 
data about said transaction processing device is.stored on said database services module. 

55. (Previously Presented) The system of claim 22 wherein said configuration 
data comprises at least one of: 

a subscriber's logo; 

a subscriber's business name; 

a subscriber's terminal identifying monikers; 

a subscriber's address; 

a subscriber's telephone number; 

a subscriber's URL; 

a subscriber's fax number; and 

a subscriber's email address. 

56. (Previously Presented) The method of claim 35 wherein said configuration 
data provided to said transaction processing device by said configuration server comprises 
transaction processing device settings used for the initial setup of said transaction processing 
device. 

57. (Canceled). 
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